Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/HwQJzg62jQW_qzoIjPCdUzK-3MA.roa
File: HwQJzg62jQW_qzoIjPCdUzK-3MA.roa (raw, json)
Hash identifier: 1ffSy8d3yliqobl1XN6f4HwW7lmzDoeSu0ARjuMLnbY=
Subject key identifier: 1F:04:09:CE:0E:B6:8D:05:BF:AB:3A:08:8C:F0:9D:53:32:BE:DC:C0
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019BF60CC670C8047C481FDB2CFC874681B2
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/HwQJzg62jQW_qzoIjPCdUzK-3MA.roa
Signing time: Sun 25 Jan 2026 16:46:30 +0000
ROA not before: Sun 25 Jan 2026 16:46:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202231
IP address blocks: 5.231.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:15:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:0c:c6:70:c8:04:7c:48:1f:db:2c:fc:87:46:81:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 25 16:46:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1f0409ce0eb68d05bfab3a088cf09d5332bedcc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6b:aa:00:e7:16:fd:ee:36:a9:f7:fd:b1:0d:
73:e2:8e:f2:8b:c4:b7:cb:97:3a:cd:30:e3:05:3d:
5f:3a:7a:07:36:68:5d:8b:c9:43:17:b6:3c:61:58:
e1:1e:e1:42:1b:ee:7e:86:a2:4c:ec:ae:b9:e6:84:
46:76:d9:1e:f3:a4:7e:aa:d5:43:cd:9d:cd:dc:5f:
a9:6f:56:83:75:2b:96:f3:7a:d3:a2:5c:83:15:9f:
d4:48:9d:95:a0:a1:1a:01:d7:07:f7:4a:ad:78:18:
0e:73:a0:cd:7c:4f:a1:a1:91:17:2f:5b:f0:7c:8b:
67:9a:dc:c5:f1:3b:89:8f:cf:f5:ef:b5:2d:fc:f3:
a0:e0:07:93:2d:b2:29:04:d0:df:33:c1:b2:e4:4d:
f6:d8:71:94:20:b6:fb:54:e3:d2:f2:59:c2:75:6b:
18:5c:d8:32:c0:8d:52:65:ba:23:ea:52:c6:33:cc:
05:15:cb:c1:e1:5e:5a:40:04:ff:68:15:3e:ae:43:
67:4d:37:02:91:42:1a:1d:e2:be:06:1f:c1:b0:b4:
f5:b8:cb:f0:b4:91:1b:46:d4:b8:d0:d3:3f:f6:ba:
f8:88:ea:ad:c7:df:97:5b:ce:e6:d4:19:b1:56:ab:
2b:62:fc:f1:b2:87:36:7d:2a:f3:9a:3c:ad:fe:f0:
b2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:04:09:CE:0E:B6:8D:05:BF:AB:3A:08:8C:F0:9D:53:32:BE:DC:C0
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/HwQJzg62jQW_qzoIjPCdUzK-3MA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.74.0/24
Signature Algorithm: sha256WithRSAEncryption
66:8b:99:10:fc:b2:f8:78:09:ce:0a:3d:10:3c:f9:c2:ce:ef:
4e:d0:e1:c2:1a:8c:f4:62:0c:e7:1e:08:ec:b7:1f:20:26:a9:
dd:48:a6:30:6c:65:c9:d0:fc:ff:f6:45:2b:b5:3c:b3:c0:57:
88:3f:16:ea:bc:c7:d8:83:b7:ec:8d:04:68:65:7a:49:16:b5:
34:fb:12:b1:28:6c:36:e4:e7:03:ec:01:aa:5c:84:96:a6:ba:
00:8d:a2:e2:72:80:2e:99:5a:1d:14:8e:76:76:ad:51:55:be:
77:1a:12:7c:e8:35:c7:1e:49:a9:55:f3:92:58:96:b4:01:6b:
a6:a6:4b:44:59:3e:70:3b:39:42:ce:c7:41:f2:c9:4e:d7:68:
00:82:81:8b:d8:3b:8b:50:b8:1a:ff:4f:fe:a8:45:84:47:a1:
b8:e0:06:f9:9f:2d:0a:8a:ae:e1:eb:85:92:6b:c8:94:2c:c1:
e6:ad:00:bd:b2:c4:01:5b:c8:5d:9e:42:a9:a3:6a:10:4b:40:
88:f7:38:20:d3:6b:c8:a6:cc:fb:a1:a7:9d:66:3f:bd:21:ae:
e9:f1:07:82:75:04:0d:d1:b3:4a:d8:d0:7d:d4:80:5c:d6:b3:
98:38:a0:21:38:58:d4:08:ba:e5:2d:bb:9c:db:be:ea:0f:83:
17:b7:ad:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:10:08 2026 by rpki-client